Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
File: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft (raw, json)
Hash identifier: jxpeMz4hqBQWQnd4zUhBcRuaiM9bkmYoPA6WqiQUINY=
Subject key identifier: 60:41:94:2D:86:18:48:47:2E:5D:33:00:38:AC:D4:21:CD:9C:41:A1
Authority key identifier: D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
Certificate issuer: /CN=d795a7259f9537186493f482d55cef4b64b1c435
Certificate serial: 019A00351976030AD2986AE9A2CBC6284EC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
Manifest number: 0EE8
Signing time: Mon 20 Oct 2025 06:01:11 +0000
Manifest this update: Mon 20 Oct 2025 06:01:11 +0000
Manifest next update: Tue 21 Oct 2025 06:01:11 +0000
Files and hashes: 1: 15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl (hash: Xriwj1A611eQ11Os/0GpKsU2l7bFtvf09mKIwCGk7SY=)
2: ZllkD09XX0UjmpDgviQyHJhN0tQ.roa (hash: cXj6wMyOUxluunshyfWaumFrSwMD+oIYxgPqs4SCj1I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:19:76:03:0a:d2:98:6a:e9:a2:cb:c6:28:4e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d795a7259f9537186493f482d55cef4b64b1c435
Validity
Not Before: Oct 20 06:01:11 2025 GMT
Not After : Oct 21 06:01:11 2025 GMT
Subject: CN=6041942d861848472e5d330038acd421cd9c41a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:99:b2:e1:20:36:ee:9d:4d:80:96:bd:9e:8e:
83:6a:76:a5:4e:0a:00:bd:1b:5d:ba:fd:d6:3d:25:
b4:97:9b:10:e5:2a:8b:aa:72:e7:e1:07:d3:1b:1a:
4f:c1:cd:3f:c6:4a:13:8c:d2:a8:30:14:0b:d5:3b:
dc:06:5f:27:d6:2b:9c:53:91:89:87:12:d7:a0:fd:
59:b5:61:f0:ae:5b:dd:97:21:b6:9f:68:0a:a8:e8:
06:af:22:06:58:d7:d9:a3:47:db:8f:d7:07:e6:ac:
39:c7:a1:e4:e8:da:9f:48:fb:10:01:1b:fd:47:58:
3b:8f:b3:d7:e6:0b:ed:8d:3d:1b:f0:ad:fd:a4:ab:
cf:9b:b9:f8:62:62:08:a5:7b:4a:0e:8b:60:93:0a:
0a:1b:e4:1b:99:6d:d8:e7:2f:62:b7:d5:03:8d:41:
8e:d3:85:a4:df:20:5f:a2:38:b1:b7:43:cc:7a:ec:
5f:8e:b3:a8:d6:28:f6:20:d3:32:6f:f6:79:c2:74:
e6:16:20:ad:f5:aa:5d:79:af:72:e3:b4:2a:5c:28:
6a:e2:51:07:c9:85:c0:fd:f5:a8:c4:92:15:7f:4f:
01:df:c4:e7:e8:18:c2:ce:51:b4:25:d8:f8:0a:5f:
9d:28:81:36:60:e2:7b:7a:cc:63:fe:96:3f:75:9a:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:41:94:2D:86:18:48:47:2E:5D:33:00:38:AC:D4:21:CD:9C:41:A1
X509v3 Authority Key Identifier:
keyid:D7:95:A7:25:9F:95:37:18:64:93:F4:82:D5:5C:EF:4B:64:B1:C4:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WnJZ-VNxhkk_SC1VzvS2SxxDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/daf87d-dfa4-4b14-93e2-b05db0bc97c4/1/15WnJZ-VNxhkk_SC1VzvS2SxxDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:95:b0:55:7e:fe:f3:3b:90:fa:3f:f4:e4:bd:9e:c7:58:b5:
d7:09:e0:31:3a:d9:8a:c1:68:c8:f9:ca:d4:51:c7:62:10:c9:
55:02:65:70:74:b3:98:3a:91:35:5a:7a:6e:cf:5b:6b:d9:78:
b9:55:71:1b:21:78:ab:1b:f0:ea:15:0b:dc:e4:ed:eb:a2:b6:
eb:b7:d7:2a:cb:cc:1e:08:c5:f9:a0:10:f3:b9:36:1d:e9:67:
be:dc:5e:ad:ab:ea:20:16:8a:85:95:f0:77:36:0c:48:eb:f7:
4d:54:97:81:4f:68:92:cd:f9:29:5a:20:2e:5e:68:78:dc:eb:
55:19:d7:0a:89:75:dc:09:10:a6:14:50:d7:8c:d5:2d:53:fc:
27:47:01:1b:3b:d9:17:1a:12:77:55:34:01:17:f9:bf:8e:04:
56:20:72:78:97:d6:3f:df:6c:04:12:2e:86:22:d7:ed:9e:de:
04:47:59:1b:b4:b4:af:af:89:7c:4f:1b:26:56:b9:fb:85:80:
61:6f:a1:b3:1f:5a:2c:3b:51:c6:22:30:fc:de:af:ee:9d:fc:
0b:7e:a1:00:69:14:0d:5c:72:10:08:e9:d9:45:51:5e:e6:5a:
dc:e9:c2:74:9c:5a:dd:9f:af:1a:34:9e:90:b8:12:00:e1:7c:
2d:e8:51:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:34 2025 by rpki-client